yoda66

AndroidEmbedIT. A quick and dirty python script to embed a Metasploit generated APK file into another APK for fun.

MAAS. Malware As A Service

GoShellcode. Go

MalwareDevTalk. C#

PowerStrip. Python

PythonShellcodeRedux. Python

ps. Python

DNSTAP-FrameStream-Python. Python

wevade. C#

bind9_logstat. A simple frequency analysis script for bind9 DNS query logs. Is able to analyze based on client IP address, DNS domain name, and DNS query type. Uses both regular expressions, and the Counter() dictionary from the Python collections module. Is written to demonstrate how useful the combination of a Counter() dictionary and regular expressions are.

RIRTools. RIRTools is a collection of python tools used to fetch, store, and process Regional Internet Registry published data. The RIR statistics exchange format requires regional registries to publish a current daily snapshot of Internet number resource allocations. These consist of IPv4, IPv6, and Autonomous System Number (ASN) resources.

PowerBleed. Powerbleed is a powershell module that allows you to check for the OpenSSL heartbeat vulnerability, exploit it and write data to a file if desired. Powerbleed defaults to checking web based SSL/TLS on port 443, however will also support STARTTLS based functionality for other protocols such as SMTP, IMAP, POP, and FTP. Only a single heartbeat, and TLS connection is attempted by default after heartbeat support is ascertained in the initial check. This can be modified with the TLSTries, and Heartbeats parameters. By default, a random delay is introduced between heartbeats which can be disabled if desired also.

DNSBlackHole. A basic DNS blackhole zone, and bind9 configuration creation utility. Will read a URL passed to it, and using a regular expression, extracts domain names from the content, and writes a bind9 named configuration file, and blackhole zone file.

TachyonNet. A project which will listen on all TCP/UDP ports, and log the first X number of bytes sent to the socket. X is defined as 8192 bytes by default.

GetAmCache. This script loads the AMCache registry hive from the default Windows location and prints relevant data.

Invoke-TCPPortScan. Perform a full TCP connection scan to the destination hostname, or to 'open.zorinaq.com' if that destination is not supplied.

community-modules. A place to share SCYTHE modules with the community.

diva-android. DIVA Android - Damn Insecure and vulnerable App for Android

HackerSanta. Python

IPv6_TestBed. A very basic IPv6 routed test bed network using Ubuntu 20.04, and basic systems configuration.

a1.

WinSysEnum. A simple Windows command file that somewhat emulates winenum.rb under Metasploit and gathers lots of data about a Windows system. It is designed to be run locally as Administrator and writes data with a timestamped filename.

DjangoSCA. DjangoSCA is a python based Django project source code security auditing system that makes use of the Django framework itself, the Python Abstract Syntax Tree (AST) library, and regular expressions.